$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json) Hash identifier: VdLNSq9Uy5C3mF6+0njQx6649g6+PZ1r8USu3sswY+o= Subject key identifier: 81:3D:9F:B9:2A:B8:0E:CB:C6:37:04:7E:8B:7A:D7:3E:29:FD:EF:76 Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft Manifest number: 0619 Signing time: Thu 12 Jun 2025 22:26:42 +0000 Manifest this update: Thu 12 Jun 2025 22:26:42 +0000 Manifest next update: Thu 19 Jun 2025 22:26:42 +0000 Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: F2qpqv1dT4joznUmTi4XtrmcHB4Tb6D8gbp9etxrZN0=) 2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: IMdjByBIYJm1pushgtHVRf7baWnF2aGGxcZRsZb6Kqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Validity Not Before: Jun 12 22:26:42 2025 GMT Not After : Jun 19 22:26:42 2025 GMT Subject: CN=684b5422-2a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:fb:48:38:ff:2c:5e:9f:20:14:cb:fb:e2: fc:30:2f:24:3b:83:df:e0:a9:1e:9d:cd:67:19:61: 4b:1c:6b:cc:59:57:c7:a1:2e:a1:7e:8d:9f:85:10: 15:ae:41:b9:a4:12:44:23:66:a1:67:27:fa:b3:45: 3b:f0:6e:d3:5c:e6:76:52:15:de:4f:9b:10:d5:7c: 8b:6f:ea:d4:c4:52:62:41:43:93:0f:b6:01:67:85: 99:bc:7f:b4:91:c6:e8:b1:ff:c4:96:cb:1f:55:a2: f7:cd:78:cd:97:3a:ea:3d:fc:af:0b:a1:d8:8e:65: b7:09:b1:d6:c3:e6:19:db:48:02:4c:87:33:e8:db: ed:0a:1c:5c:85:6a:cd:f2:a1:af:c1:7d:50:86:f6: 11:9f:d0:3f:94:ca:5d:0d:28:1c:66:8d:48:1d:29: e2:2b:51:81:53:f1:bd:c2:ec:3d:d9:9b:84:34:76: c7:6f:7d:2a:37:2f:d4:ec:9d:dd:26:13:f2:88:44: 25:d6:77:b2:57:b2:2f:38:85:23:84:cd:e4:3e:0c: 51:43:ce:b5:7d:95:b4:ac:dc:1b:61:94:40:33:67: c2:9d:69:49:ca:80:d2:83:df:39:f7:41:25:bf:ed: 8f:c6:dc:45:07:25:26:19:d4:15:0a:d0:ce:56:b3: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:9F:B9:2A:B8:0E:CB:C6:37:04:7E:8B:7A:D7:3E:29:FD:EF:76 X509v3 Authority Key Identifier: keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:80:b2:e8:19:51:49:79:ad:35:95:b8:f4:17:09:92:34:bf: 93:71:da:ce:ac:93:7f:dd:aa:d5:1c:62:09:c7:92:af:3e:e9: 96:e1:58:34:90:63:ba:ad:79:d4:5e:da:b2:dc:f9:a5:bd:26: 3b:4e:c5:00:6e:93:61:24:02:1d:a1:ee:ad:fc:87:30:77:83: bc:2d:60:ad:b4:5d:c0:8a:93:01:52:92:44:6e:0c:b3:d5:5f: 60:9c:2f:fe:bc:e9:e8:87:b1:73:8b:df:73:c7:b9:c3:3a:4f: 7e:b5:28:97:0f:9f:f2:b5:40:e5:39:2f:82:1a:e0:78:6c:8d: b0:92:12:28:4c:69:84:b0:ed:19:a7:7e:00:f4:51:e1:71:e5: bd:d7:6f:b2:fc:95:a2:54:a7:95:eb:00:69:51:96:7c:b9:6b: b7:d1:87:9d:87:63:05:cd:30:f8:14:f5:7f:ce:da:6f:7b:e2: 26:87:76:a4:fb:b3:b2:ce:98:e3:50:c3:87:a5:38:0e:9c:fc: 3d:40:f8:26:19:88:3d:a1:4b:ef:bf:91:19:13:e8:4b:27:82: f3:d0:13:59:d6:36:da:d0:25:b0:31:38:c6:bf:99:2f:d0:db: 17:41:50:a7:31:a3:4b:a0:de:50:d0:d5:16:f6:0d:c3:53:4f: c1:1d:1e:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMjgxMTAvBgNVBAUTKDgwOUVGRjFGNzgxOUI4MTc1MUYxNzdBQjVBRkVEODJC Q0MzMkE1NjkwHhcNMjUwNjEyMjIyNjQyWhcNMjUwNjE5MjIyNjQyWjAYMRYwFAYD VQQDEw02ODRiNTQyMi0yYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZf7SDj/LF6fIBTL++L8MC8kO4Pf4Kkenc1nGWFLHGvMWVfHoS6hfo2fhRAV rkG5pBJEI2ahZyf6s0U78G7TXOZ2UhXeT5sQ1XyLb+rUxFJiQUOTD7YBZ4WZvH+0 kcbosf/ElssfVaL3zXjNlzrqPfyvC6HYjmW3CbHWw+YZ20gCTIcz6NvtChxchWrN 8qGvwX1QhvYRn9A/lMpdDSgcZo1IHSniK1GBU/G9wuw92ZuENHbHb30qNy/U7J3d JhPyiEQl1neyV7IvOIUjhM3kPgxRQ861fZW0rNwbYZRAM2fCnWlJyoDSg98590El v+2PxtxFByUmGdQVCtDOVrOngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIE9n7kq uA7LxjcEfot61z4p/e92MB8GA1UdIwQYMBaAFICe/x94GbgXUfF3q1r+2CvMMqVp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyOC84QTRBREVFNEEx MUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVCZFI4WGVyV3Y3WUs4d3lw V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKN19IM2dadUJkUjhYZXJXdjdZSzh3eXBXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAyOC84QTRBREVFNEExMUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVC ZFI4WGVyV3Y3WUs4d3lwV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkgLLoGVFJea01lbj0FwmSNL+TcdrOrJN/3arVHGIJx5KvPumW4Vg0 kGO6rXnUXtqy3PmlvSY7TsUAbpNhJAIdoe6t/Icwd4O8LWCttF3AipMBUpJEbgyz 1V9gnC/+vOnoh7Fzi99zx7nDOk9+tSiXD5/ytUDlOS+CGuB4bI2wkhIoTGmEsO0Z p34A9FHhceW912+y/JWiVKeV6wBpUZZ8uWu30Yedh2MFzTD4FPV/ztpve+Imh3ak +7OyzpjjUMOHpTgOnPw9QPgmGYg9oUvvv5EZE+hLJ4Lz0BNZ1jba0CWwMTjGv5kv 0NsXQVCnMaNLoN5Q0NUW9g3DU0/BHR7D -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:18 2025 by rpki-client